Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0d85f0-c9db-4838-a785-2861746c73bf/1/VQD_yB0HZwGDSogclqC1M1Vbf6g.roa
File: VQD_yB0HZwGDSogclqC1M1Vbf6g.roa (raw, json)
Hash identifier: jHm5VKg9niNE0Ml6866wTyBtoBlm/YX8sV4rgZJLLHg=
Subject key identifier: 55:00:FF:C8:1D:07:67:01:83:4A:88:1C:96:A0:B5:33:55:5B:7F:A8
Certificate issuer: /CN=a74638316276c9c81935e43bd2bd9d25e2865c48
Certificate serial: FAF9F6
Authority key identifier: A7:46:38:31:62:76:C9:C8:19:35:E4:3B:D2:BD:9D:25:E2:86:5C:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0d85f0-c9db-4838-a785-2861746c73bf/1/VQD_yB0HZwGDSogclqC1M1Vbf6g.roa
Signing time: Sat 01 Jan 2022 01:00:34 +0000
ROA not before: Sat 01 Jan 2022 01:00:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204463
IP address blocks: 185.185.53.0/24 maxlen: 24
185.185.52.0/24 maxlen: 24
185.185.55.0/24 maxlen: 24
185.185.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16447990 (0xfaf9f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74638316276c9c81935e43bd2bd9d25e2865c48
Validity
Not Before: Jan 1 01:00:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5500ffc81d076701834a881c96a0b533555b7fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e5:e5:80:3c:bc:2b:95:41:52:6d:1c:0d:c1:
76:a0:98:0a:5f:c4:11:a7:11:fe:16:51:79:05:34:
3b:cc:bd:66:1c:b6:54:fe:74:ba:a3:3a:51:7b:4f:
1c:c2:cf:99:f3:1c:89:69:75:90:76:7d:b8:f7:28:
42:c1:fa:2a:fe:fa:a0:67:31:66:03:2f:16:25:14:
90:cc:fa:bb:18:ab:90:4e:dd:63:ae:d3:e2:dd:f6:
70:fe:17:65:c6:8d:04:f3:b6:31:ef:5a:f7:1e:66:
fe:c0:fb:1b:f0:06:5b:74:2d:a3:3d:c9:a4:26:1b:
e3:47:98:ed:66:90:e7:57:3a:66:b7:a3:77:9e:fa:
a9:dc:9e:0c:a0:7b:12:34:5b:28:0c:08:21:e1:4e:
46:88:c5:94:a1:34:e6:c3:1f:b6:af:97:e7:2e:c1:
05:cf:16:00:84:d5:88:82:d9:2d:87:e2:b5:aa:f0:
c7:53:a9:32:4e:c4:f3:5a:ca:55:da:d0:2a:31:aa:
22:02:ba:8e:69:43:c1:1f:cc:57:31:ae:7e:e8:4d:
e2:a1:1a:72:67:e5:ff:50:07:8d:b6:25:b3:c6:16:
3a:f8:85:b5:88:39:15:75:d6:30:d9:37:54:07:06:
64:59:b2:13:be:16:fb:2a:bc:28:23:e6:bf:d1:e8:
c6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:00:FF:C8:1D:07:67:01:83:4A:88:1C:96:A0:B5:33:55:5B:7F:A8
X509v3 Authority Key Identifier:
keyid:A7:46:38:31:62:76:C9:C8:19:35:E4:3B:D2:BD:9D:25:E2:86:5C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0d85f0-c9db-4838-a785-2861746c73bf/1/VQD_yB0HZwGDSogclqC1M1Vbf6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0d85f0-c9db-4838-a785-2861746c73bf/1/p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.52.0/22
Signature Algorithm: sha256WithRSAEncryption
45:a2:7c:a5:2a:df:9c:07:ff:cd:17:9a:ad:a8:17:76:dd:a7:
59:34:20:88:06:a2:77:2d:3e:df:e7:21:5f:cf:41:4f:10:80:
2a:72:44:3e:a9:87:0b:fc:d0:7f:e0:98:0c:97:d1:6e:d8:7c:
a6:2d:f2:6c:16:f0:28:d1:64:05:2e:d1:81:03:b3:13:81:b6:
cd:e5:55:dd:ea:47:96:c2:3a:6a:d3:15:93:5c:ef:78:8d:11:
13:74:0c:9b:72:2d:30:a7:d5:63:b2:9b:cb:22:b8:fc:26:d7:
0e:8c:8f:fe:81:f0:57:08:c4:c9:98:1a:7c:64:a0:19:5a:fe:
5f:37:d5:e6:1a:a9:f3:02:7f:1d:60:87:77:7a:31:d6:51:57:
47:4b:4c:22:85:56:01:42:48:57:59:19:16:e1:a9:93:49:7e:
5c:42:97:da:45:43:4b:a4:df:1a:56:41:92:7f:27:8e:23:7e:
5d:79:72:fe:ca:ef:f8:5a:00:28:a8:8e:65:ba:8e:7a:57:fc:
e3:6a:91:3e:a9:ce:01:5b:af:1d:f5:f7:71:bf:82:5d:31:e0:
ae:78:d5:9c:6b:e6:ca:bc:c0:db:7e:e1:b0:cf:77:89:9c:d9:
cd:dd:ce:7b:cb:91:03:2a:55:bb:6f:e9:e4:9c:71:f1:d2:cb:
85:1e:1a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:48 2023 by rpki-client on console.sobornost.net